move kms key to cloudwatch resource

sheenamt · sheenamt · commit 322779a156e4 · 2021-12-20T10:44:23.000-08:00
diff --git a/main.tf b/main.tf
@@ -73,9 +73,6 @@ resource "aws_iam_role_policy" "main" {
   role = aws_iam_role.main.id
 
   policy = data.aws_iam_policy_document.main.json
-
-  # set the key, else empty string
-  kms_key_id = var.cloudwatch_encryption_key_arn
 }
 
 #
@@ -106,6 +103,9 @@ resource "aws_cloudwatch_log_group" "main" {
     Name        = "${local.name}-${var.environment}"
     Environment = var.environment
   }
+
+  # set the key, else empty string
+  kms_key_id = var.cloudwatch_encryption_key_arn
 }
 
 #

Original file line number	Diff line number	Diff line change
`@@ -73,9 +73,6 @@ resource "aws_iam_role_policy" "main" {`
`73`	`73`	`role = aws_iam_role.main.id`
`74`	`74`
`75`	`75`	`policy = data.aws_iam_policy_document.main.json`
`76`		`-`
`77`		`- # set the key, else empty string`
`78`		`- kms_key_id = var.cloudwatch_encryption_key_arn`
`79`	`76`	`}`
`80`	`77`
`81`	`78`	`#`
`@@ -106,6 +103,9 @@ resource "aws_cloudwatch_log_group" "main" {`
`106`	`103`	`Name = "${local.name}-${var.environment}"`
`107`	`104`	`Environment = var.environment`
`108`	`105`	`}`
	`106`	`+`
	`107`	`+ # set the key, else empty string`
	`108`	`+ kms_key_id = var.cloudwatch_encryption_key_arn`
`109`	`109`	`}`
`110`	`110`
`111`	`111`	`#`